Launchpad.net

CVE 2022-25350

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization.

See the CVE page on Mitre.org for more details.